Issue details

20/00099 - Cloud Back up and Recovery Contract award

Background:

 

KCC currently use a data back-up system managed by Cantium Business Solutions to ensure all systems and associated data is backed up at regular intervals. As KCC move more data and software systems into a cloud-based infrastructure there is a requirement to manage backups in a different way, i.e. KCC need a solution that will provide a secure environment in which back-ups are stored ‘off site’ and constantly available for business recovery.

 

Proposal:

 

KCC need a data back-up solution that:

 

a)    is designed to function within a cloud infrastructure;

 

b)    provides full segregation of data from live production environment (i.e. a definitive ‘air gap’ that keeps the back-up data completely secure from any corruptive forces e.g. malware or ransomware (destructive code); and

 

c)    is managed within a robust SLA with clear and auditable recovery schedules

 

To achieve these aims it is proposed that KCC enter into a new 3-year contract for the supply of a managed Back up as a Service (BaaS)

 

Options (other options considered but discarded)

 

Renew existing solution - The current solution is designed to function in an environment where data is predominantly stored in a physical data centre situated ‘on prem’. It is operated by Cantium Business Solutions on KCC behalf, and is not suitable for cloud infrastructure, utilises near end of life hardware, and does not provide back up storage that is completely segregated from live production systems.

 

How the proposed decision meets the objectives of ‘Increasing Opportunities, Improving Outcomes: Kent County Council’s Strategic Statement (2015-2020)’

 

By having a robust managed back up solution KCC can provide a high degree of confidence in their ability to recover from a disruptive event that puts critical service delivery at risk.

 

Decision type: Key

Reason Key: Expenditure or savings of more than £1m;

Decision status: For Determination

Division affected: (All Division);

Notice of proposed decision first published: 28/09/2020

Anticipated restriction: Part exempt  - View reasons

Decision due: Not before 27th Oct 2020 by Deputy Leader and Cabinet Member for Finance, Corporate and Traded Services
Reason: In order that the proposed decision can be published for a minimum of 28 days, in accordance with statutory requirements

Lead member: Deputy Leader and Cabinet Member for Finance, Corporate and Traded Services

Lead director: Rebecca Spore

Department: Strategic & Corporate Services

Contact: Andrew Cole, Head of Technology Commissioning & Strategy Tel: 03000 417554 Email: Andrew.Cole@kent.gov.uk.

Consultees

Has any public consultation been undertaken or is any planned?

 

None.

 

Cabinet Committee consultation planned: 

 

Policy and Resources Cabinet Committee – November 2020

Financial implications: The contract costs will be offset in part by the current budgets that are available and along with the allocation identified in the ICT Reserve.

Legal implications: There are no legal implications.

Equalities implications: A DPIA has not yet been completed. Any data protection implications will be addressed as part of the procurement process and a DPIA completed as appropriate.